| Package | Affected versions | Patched versions |
|---|---|---|
| jomres | < 7.3.1 | 7.3.1 |
SQL injection vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to execute arbitrary SQL commands via the id parameter in an editProfile action to administrator/index.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free